-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2
      ec6abd0a5001040b3971ca787761dedc0ce01660a331d572a36223e2abb72f54  turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2

    $ sha512sum turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2
      012e662b1c47be564fc08a17dfd72cc858e561ac80da709bc57d360e16a7aa310d230b76171606b34394e0bb279e66bca2af89df4aae1ebe54009bab05a72d5d  turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2.hash
      turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2: OK

    $ sha512sum -c turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2.hash
      turnkey-orangehrm-15.1-stretch-amd64-xen.tar.bz2: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlv/pi8ACgkQhcJelaFu
uU2TqQf/fG255MHHaCgM5cwoxFCo9LT/ah4LWD9PZhuFkfVDhrC8yq3byl2KFJc4
t7Tu5uusOMcPty1RZRfxlsvP2exbAcuw9LeBv+Wm0cXdQoMv7bqTyzFpf073K/KK
4+WPTXvn/9JFORcaqHVztMgue+hnYlCp/6NjAo300n1wVjR2rsmeg6FRORFUV9Do
F2+PtHHGofWdAuIPcLJoPnkWKdFsQ3gmTIoH85E8Mx9V0IKWFitsBnQKWqZOJa3q
HMNPy8+t//1sstPOF1Hf7G7HSGOGuTUrDVz51Obwu3SGy6Y2FARPTNBvIog6CPIE
jgVSfBiQQfw788jm6qQR96vKRC+WmQ==
=8YEu
-----END PGP SIGNATURE-----